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Amendments to the Claims : 

This listing of claims will replace all prior versions, and listings, of claims in the 
application. 
Listing of Claims : 

1 . (previously presented) The system of claim 23, where the second entity includes: 
a service activation component offering the extensible set of services. 

2. (currently amended) The system of claim 1 , where the service activation 
component is configured to configure a router to deliver the service. 

3-7. (canceled) 

8. (currently amended) The system of claim 23, where the first entity corresponds to 
a business partner system and the second entity corresponds to a service activation component, 
the service activation component provides the service to a customer associated with the business 
partner system, the business partner system generates the message requesting service for the 
customer; and 

where the first interface module is further configured to: 

authenticate the business partner system based, at least in part, on information 
included in the message. 
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9. (currently amended) The system of claim 23, where the first entity includes a 
plurality of service activation components; and 

where the system further comprises: 

a second entity locator configured to obtain information associated with the service 
activation components; and 

where the second interface module is further configured to: 

contact the second entity locator to identify one of the service activation 
components from which to request performance of the service. 

10. (currently amended) The system of claim 9, where the message includes a 
subscriber identifier that identifies a subscriber on whose behalf the service is being requested; 
and 

where the second entity locator is configured to map the subscriber identifier to the 
identified one of the service activation components. 

1 1 . (currently amended) The system of claim 23, further comprising: 

an extension manager configured to facilitate at least one of modification of services in 
the extensible set of services or addition of new services to the extensible set of services offered 
by the second entity. 

12. (previously presented) The system of claim 23, where the extensible set of 
services includes network services associated with communication on the Internet. 
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13-15. (canceled) 

16. (previously presented) The method of claim 3 1 , further comprising: 
rejecting the message if the first result indicates that the first entity is not permitted to 

request performance of the network service, the second result indicates that the first entity is not 
permitted to provide the argument, or the third result indicates that the argument is not 
permissible for the network service. 

17. (canceled) 

18. (previously presented) The method of claim 3 1 , further comprising: 
configuring a router to deliver the network service to a subscriber. 

19. (canceled) 

20. (previously presented) The method of claim 3 1 , further comprising: 
authenticating the first entity based, at least in part, on information included in the 

message. 
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2 1 . (previously presented) The method of claim 3 1 , where the message includes a 
subscriber identifier that identifies a subscriber on whose behalf the requested service is being 
requested; and 

where the method further comprises identifying the second entity from a plurality of 
second entities based, at least in part, on the subscriber identifier included in the message. 

22. (previously presented) The method of claim 3 1 , where the extensible set of 
network services includes network services associated with communication on the Internet. 

23. (previously presented) A system, comprising: 

a service gateway in communication with a first entity and a second entity, the service 
gateway comprising: 

a first interface module to receive, from the first entity, a message requesting 
performance of a service in an extensible set of services offered by the second entity, the 
message including a service name that corresponds to the service and an argument that 
includes data used to perform the service; 
an access control module to: 

make a first determination of whether the first entity is permitted to 
request performance of the service corresponding to the service name, 

make a second determination of whether the argument is permitted to be 
provided by the first entity, and 
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make a third determination of whether the argument is permitted to be 
requested for the service corresponding to the service name; and 
a second interface module to selectively request performance of the service by the 

second entity based, at least in part, on results of the first, second, and third 

determinations of the access control module. 

24. (currently amended) The system of claim 23, where the access control module is 
further configured to reject the message if the first determination determines that the first entity 
is not permitted to request performance of the service, the second determination determines that 
the argument is not permitted to be provided by the first entity, or the third determination 
determines that the argument is not permitted to be requested for the service. 

25. (canceled) 

26. (currently amended) A wholesaler system that provides services to subscribers 
associated with a plurality of retailer systems, the wholesaler system comprising: 

a service activation component configured to provide the services to the subscribers; and 
a service gateway configured to act as a single point of contact between the retailer 
systems and the service activation component, the service gateway providing controlled access, 
by the retailer systems, to the services provided by the service activation component, the service 
gateway permitting each of the retailer systems access to a subset of the services provided by the 
service activation component via the controlled access, 
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the service gateway comprising: 

a first interface module to receive, from one of the retailer systems, a message 
requesting performance of one of the services by the service activation component, the 
message including at least one argument that includes data used to perform the one 
service, 

an access control module to: 

make a first determination of whether the one retailer system is permitted 
to request performance of the one service, 

make a second determination of whether the at least one argument is 
permissible for the one retailer system, and 

make a third determination of whether the at least one argument is valid 
for the one service, and 

a second interface module to selectively interact with the service activation 
component based, at least in part, on the first, second, and third determinations of the 
access control module. 

27. (previously presented) The wholesaler system of claim 26, where the services 
provided by the service activation component include network services. 

28. (previously presented) The wholesaler system of claim 26, where the services 
provided by the service activation component include an extensible set of services. 
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29. (previously presented) The wholesaler system of claim 26, where the service 
gateway and the service activation component in combination provide a common interface via 
which the retailer systems request one or more of the services provided by the service activation 
component, the combination exposing subsets of the common interface to each of the retailer 
systems by controlling access to the services by the retailer systems. 

30. (canceled) 

3 1 . (previously presented) A method performed by a service gateway in 
communication with a first entity and a second entity, the method comprising: 

receiving, from the first entity, a message requesting performance of a network service of 
an extensible set of network services offered by the second entity, the message including a 
service name that corresponds to the network service and an argument that includes data used to 
perform the network service; 

generating a first result based, at least in part, on a determination of whether the first 
entity is permitted to request performance of the network service corresponding to the service 
name; 

generating a second result based, at least in part, on a determination of whether the first 
entity is permitted to provide the argument; 

generating a third result based, at least in part, on a determination of whether the 
argument is permissible for the network service corresponding to the service name; and 
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selectively requesting performance of the network service by the second entity based, at 
least in part, on the first, second, and third results. 

32. (canceled) 

33. (previously presented) The system of claim 23, where the second interface 
module is configured to request performance of the service when the first determination 
determines that the first entity is permitted to request performance of the service, the second 
determination determines that the argument is permitted to be provided by the first entity, and the 
third determination determines that the argument is permitted to be requested for the service. 

34. (previously presented) The method of claim 3 1 , where selectively requesting 
performance of the network service includes: 

requesting performance of the network service when the first result indicates that the first 
entity is permitted to request performance of the network service, the second result indicates that 
the first entity is permitted to provide the argument, and the third result indicates that the 
argument is permissible for the network service. 

35. (previously presented) A device, comprising: 

means for receiving, from a requestor, a message requesting performance of one of a 
plurality of network services offered by a server, the message including an argument that 
includes data used to perform the one network service; 
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means for performing a first determination of whether the requestor is permitted to 
request performance of the one network service; 

means for performing a second determination of whether the requestor is permitted to 
provide the argument; 

means for performing a third determination of whether the argument is permissible for 
the one network service; and 

means for requesting performance of the one network service by the server based, at least 
in part, on the first, second, and third determinations. 
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